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In the claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims : 

1 . (Currently Amended) A method of improving security processing in a computing 
network, comprising st e ps of : 

providing security processing in an operating system kernel; 

providing an application program which makes use of the operating system kernel during 
execution; 

executing the application program; and 

selectably securing at least one communication of the executing application program with 
a remotely executing application program using the provided security processing in the operating 
system kernel. 

2. (Currently Amended) The method according to Claim 1 , further comprising the 

st e p of : 

configuring on e or mor e ports at least one port used by the provided application program 
such that communications using the configur e d ports at least one port are to be secured; and 

wherein fee selectably securing the at least one communication of the executing 
application program s tep then secures all communications using the configur e d ports at least one 
port . 

3. (Original) The method according to Claim 2, wherein the provided application 
program does not include code for security processing. 

4. (Currently Amended) The method according to Claim 2, wherein the configuring 
step at least one port further comprises specifying information to be used by in fee selectably 
securing-sie p the at least one communication of the executing application program . 
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5. (Currently Amended) The method according to Claim 4, wherein the specified 
information comprises at least one or mor e o f: authentication information; cipher suites options; 
and security key input information. 

6. (Currently Amended) The method according to Claim 2, wherein the configuring 
step -at least one port comprises at least one or mor e of: providing port definition statements; 
setting environment variables; and using job control language. 

7. (Currently Amended) The method according to Claim 1 , further comprising fee 
step-ef providing, in the secure processing, support for at least one or mor e security directives. 

8. (Currently Amended) The method according to Claim 7, further comprising fee 
step-ef invoking, during execution of the provided application program, the at least one or mor e 
of th e provid e d security dir e ctiv e s directive . 




9. (Currently Amended) The method according to Claim 7, wherein the at least one 



provid e d security dir e ctiv e s compris e directive comprises at least one or mor e of: access 
capability for a client certificate; access capability for a client identifier; a request to start 
operation of fee-selectably securing ste p the at least one communication of the executing 
application program ; and a request to stop operation of fee selectably securing ste p the at least 
one communication of the executing application program . 

10. (Currently Amended) The method according to Claim 8, wherein the at least one 
provid e d security dir e ctiv e s includ e directive comprises an access capability for a client 
certificate, and wherein fee invoking step -at least one security directive invokes the access 
capability, and further comprising th e st e p of returning the client certification from the provided 
security processing to the executing application program in response to the invocation. 
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1 1 . (Currently Amended) The method according to Claim 8, wherein the at least one 
provided security diroctiv e s includ e directive comprises an access capability for a client 
identification, and wherein the invoking step -at least one security directive invokes the access 
capability, and further comprising th e st e p of returning the client identification from the provided 
security processing to the executing application program in response to the invocation. 

12. (Currently Amended) The method according to Claim 1 , further comprising the 
st e ps of : 

providing, in the secure processing, support for a security directive that requests the 
selectably securing step the at least one communication of the executing application program t o 
begin operating; and 

invoking the security directive; and 

wherein the selectably securing step the at least one communication of the executing 
a pplication program then secures all communications of the executing application program. 

1 3 . (Currently Amended) The method according to Claim 1 , further comprising the 
steps of : 

providing, in the secure processing, support for a security directive that requests fee 
selectably securing step the at least one communication of the executing application program t o 
stop operating; and 

invoking the security directive; and 

wherein fee selectably securing step -the at least one communication of the executing 
a pplication program t hen comprises stopping s teps-securing communications of the executing 
application program. 

14. (Currently Amended) The method according to Claim 12, wherein the security 
directive specifies information to be used by th e in selectably securing step the at least one 
communication of the executing application program . 
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15. (Currently Amended) The method according to Claim 14, wherein the specified 
information comprises at least one or mor e of: authentication information; cipher suites options; 
and security key input information. 

16. (Original) The method according to Claim 12, wherein a decision to invoke the 
security directive is made by the executing application program. 

17. (Original) The method according to Claim 12, wherein a decision to invoke the 
security directive is made by carrying out, by the executing application program, a security 
negotiation protocol. 

1 8. (Currently Amended) The method according to Claim 1 , wherein the provided 
application program includ e s comprises calls that invoke security processing, and further 
comprising st e ps of : 

intercepting, in the provided security processing, the calls; and 
executing, responsive to the interception, corresponding security functions. 

1 9. (Currently Amended) The method according to Claim 1 , wherein the provided 
application program includ e s comprises calls that invoke security processing, and further 
comprising step-ef interpreting, in the provided security processing, the calls as being non- 
operative. 

20. (Currently Amended) The method according to Claim 1 8, wherein the provided 
application program may be executed on a system which does not include the provided security 
processing in the operating system kernel, in which case the calls operate to perform security 
processing instead of the selectably securing ste p the at least one communication of the 
executing application program . 
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21. (Original) The method according to Claim 1, wherein the provided security 
processing operates in a Transmission Control Protocol layer of the operating system kernel. 

22. (Original) The method according to Claim 1, wherein the provided security 
processing implements Secure Sockets Layer. 

23. (Currently Amended) The method according to Claim 1, wherein the provided 
security processing implements Transaction Transport Layer Security. 

24. (Currently Amended) A system for improving security processing in a computing 
network, comprising: 

means for performing security processing in an operating system kernel; 

means for executing an application program which makes use of the operating system 
kernel during execution; and 

means for selectably securing at least one communication of the executing application 
program with a remotely executing application program u sing the means for performing security 
processing, in a manner which is transparent to the executing application program. 

25. (Currently Amended) A system for improving security processing in a computing 
network, comprising: 

means for performing security processing in an operating system kernel; 

means for executing an application program which makes use of the operating system 
kernel during execution; and 

means for selectably securing at least one communication of the executing application 
program with a remotely executing application program u sing the security processing performed 
in the operating system kernel. 
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26. (Currently Amended) A computer program product for improving security 
processing in a computing network, the computer program product embodied on at least one er 
fflere-computer-readable media and comprising: 

computer-readable program code m e ans for p e rforming configured to perform security 
processing in an operating system kernel; 

computer-readable program code means for e x e cuting configured to execute an 
application program which makes use of the operating system kernel during execution; and 

computer-readable program code m e ans for s e l e ctably s e curing configured to selectablv 
secure at least one communication of the executing application program with a remotely 
executing application program using the security processing performed in the operating system 
kernel. 



